Toggen Blog

Tech tips

Articles

Latest

Access

Blog History

Read a Windows registry Hive from Linux CLI

Just had to find the operating system of a remote computer so I copied the C:\Windows\System32\config\software.sav (the software hive file is locked by the OS so used the .sav instead) file to Ubuntu 2024 Linux and used hivexget to read the "ProductName" sudo apt-get...

List local disks

GET-CimInstance -query "SELECT * from Win32_DiskDrive" DeviceID Caption Partitions Size Model -------- ------- ---------- ---- ----- \\.\PHYSICALDRIVE0 WDC WD60EZAZ-00ZGHB0 0 6001172513280 WDC WD60EZAZ-00ZGHB0 \\.\PHYSICALDRIVE2 Seagate One Touch w/PW SCSI Disk Device...